Commit graph

40 commits

Author SHA1 Message Date
8811ab705c chore(deps): update zricethezav/gitleaks docker tag to v8.18.1 (#3)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | patch | `v8.18.0` -> `v8.18.1` |

---

### Release Notes

<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>

### [`v8.18.1`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.1)

[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.0...v8.18.1)

#### Changelog

-   [`dab7d02`](https://github.com/gitleaks/gitleaks/commit/dab7d02) dont crash on 100gb files pls ([#&#8203;1292](https://github.com/gitleaks/gitleaks/issues/1292))
-   [`e63b657`](https://github.com/gitleaks/gitleaks/commit/e63b657) remove secretgroup from default config ([#&#8203;1288](https://github.com/gitleaks/gitleaks/issues/1288))
-   [`20fcf50`](https://github.com/gitleaks/gitleaks/commit/20fcf50) feat: Hashicorp Terraform fields for password ([#&#8203;1237](https://github.com/gitleaks/gitleaks/issues/1237))
-   [`b496677`](https://github.com/gitleaks/gitleaks/commit/b496677) perf: avoid allocations with `(*regexp.Regexp).MatchString` ([#&#8203;1283](https://github.com/gitleaks/gitleaks/issues/1283))
-   [`a3ab4e8`](https://github.com/gitleaks/gitleaks/commit/a3ab4e8) refactor: more explicit rules ([#&#8203;1280](https://github.com/gitleaks/gitleaks/issues/1280))
-   [`bd9a25a`](https://github.com/gitleaks/gitleaks/commit/bd9a25a) bugfix: reduce false positives for stripe tokens by using word boundaries in regex ([#&#8203;1278](https://github.com/gitleaks/gitleaks/issues/1278))
-   [`6d0d8b5`](https://github.com/gitleaks/gitleaks/commit/6d0d8b5) add Infracost API rule ([#&#8203;1273](https://github.com/gitleaks/gitleaks/issues/1273))
-   [`2959fc0`](https://github.com/gitleaks/gitleaks/commit/2959fc0) refactor: simplify test asserts ([#&#8203;1271](https://github.com/gitleaks/gitleaks/issues/1271))
-   [`d37b38f`](https://github.com/gitleaks/gitleaks/commit/d37b38f) Update Makefile
-   [`14b1ca9`](https://github.com/gitleaks/gitleaks/commit/14b1ca9) refactor: change detect tests to t.Fatal instead of log.Fatal ([#&#8203;1270](https://github.com/gitleaks/gitleaks/issues/1270))
-   [`d9f86d6`](https://github.com/gitleaks/gitleaks/commit/d9f86d6) feat(rules): Add detection for Scalingo API Token ([#&#8203;1262](https://github.com/gitleaks/gitleaks/issues/1262))
-   [`ed34259`](https://github.com/gitleaks/gitleaks/commit/ed34259) feat(jwt): detect base64-encoded tokens ([#&#8203;1256](https://github.com/gitleaks/gitleaks/issues/1256))
-   [`0d5e46f`](https://github.com/gitleaks/gitleaks/commit/0d5e46f) feat: add --ignore-gitleaks-allow cmd flag ([#&#8203;1260](https://github.com/gitleaks/gitleaks/issues/1260))
-   [`a82ac29`](https://github.com/gitleaks/gitleaks/commit/a82ac29) switch out libs ([#&#8203;1259](https://github.com/gitleaks/gitleaks/issues/1259))
-   [`0b84afa`](https://github.com/gitleaks/gitleaks/commit/0b84afa) fix: no-color option should also affect zerolog output ([#&#8203;1242](https://github.com/gitleaks/gitleaks/issues/1242))
-   [`8976539`](https://github.com/gitleaks/gitleaks/commit/8976539) Fixed lineEnd indexing if the match is the whole line ([#&#8203;1223](https://github.com/gitleaks/gitleaks/issues/1223))
-   [`30c6117`](https://github.com/gitleaks/gitleaks/commit/30c6117) feat: Add optional redaction value, default 100 ([#&#8203;1229](https://github.com/gitleaks/gitleaks/issues/1229))
-   [`e9135cf`](https://github.com/gitleaks/gitleaks/commit/e9135cf) fix(jwt): longer segment lengths ([#&#8203;1214](https://github.com/gitleaks/gitleaks/issues/1214))
-   [`f65f915`](https://github.com/gitleaks/gitleaks/commit/f65f915) Added yarn.lock file to default allowlist paths ([#&#8203;1258](https://github.com/gitleaks/gitleaks/issues/1258))
-   [`abfd0f3`](https://github.com/gitleaks/gitleaks/commit/abfd0f3) Update README.md
-   [`18283bb`](https://github.com/gitleaks/gitleaks/commit/18283bb) feat(rules): make case insensitivity optional ([#&#8203;1215](https://github.com/gitleaks/gitleaks/issues/1215))
-   [`9fb36b2`](https://github.com/gitleaks/gitleaks/commit/9fb36b2) feat(rules): detect Hugging Face access tokens ([#&#8203;1204](https://github.com/gitleaks/gitleaks/issues/1204))
-   [`db4bc0f`](https://github.com/gitleaks/gitleaks/commit/db4bc0f) Resolve [#&#8203;1170](https://github.com/gitleaks/gitleaks/issues/1170) - Enable selection of a single rule  ([#&#8203;1183](https://github.com/gitleaks/gitleaks/issues/1183))
-   [`3cbcda2`](https://github.com/gitleaks/gitleaks/commit/3cbcda2) Update authress.go to include alternate form account dash (-) ([#&#8203;1224](https://github.com/gitleaks/gitleaks/issues/1224))
-   [`46c6272`](https://github.com/gitleaks/gitleaks/commit/46c6272) refactor: remove unnecessary removing temp files in tests ([#&#8203;1255](https://github.com/gitleaks/gitleaks/issues/1255))
-   [`963a697`](https://github.com/gitleaks/gitleaks/commit/963a697) refactor: use os.ReadFile instead of os.Open + io.ReadAll ([#&#8203;1254](https://github.com/gitleaks/gitleaks/issues/1254))
-   [`163ec21`](https://github.com/gitleaks/gitleaks/commit/163ec21) fix(sumologic): improve patterns ([#&#8203;1218](https://github.com/gitleaks/gitleaks/issues/1218))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:51:22 +01:00
a6eaa1958e chore(deps): update thegeeklab/drone-docker-buildx docker tag to v24 (#6)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx) | major | `23` -> `24` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #6
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:51:11 +01:00
ebd4e96948 chore(deps): pin dependencies (#2)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| alpine | final | pinDigest |  -> `51b6726` |
| alpine | stage | pinDigest |  -> `51b6726` |
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) |  | pinDigest |  -> `430e949` |
| [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx) |  | pinDigest |  -> `2c5226d` |
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) |  | pinDigest |  -> `e5f6d1a` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:48:33 +01:00
d2d9839128 chore: Configure Renovate (#1)
Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---
### Detected Package Files

 * `Dockerfile` (dockerfile)
 * `.woodpecker/build.yml` (woodpecker)
 * `.woodpecker/lint.yml` (woodpecker)

### Configuration Summary

Based on the default config's presets, Renovate will:

  - Start dependency updates only once this onboarding PR is merged
  - Enable Renovate Dependency Dashboard creation.
  - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use.
  - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests directories.
  - Group known monorepo packages together.
  - Use curated list of recommended non-monorepo package groupings.
  - Apply crowd-sourced package replacement rules.
  - Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs.

---

### What to Expect

With your current configuration, Renovate will create 4 Pull Requests:

<details>
<summary>chore(deps): pin dependencies</summary>

  - Schedule: ["at any time"]
  - Branch name: `renovate/pin-dependencies`
  - Merge into: `master`
  - Upgrade alpine to `sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48`
  - Upgrade [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) to `sha256:430e949e6554d56ffc2dd08898ee609c71822d7fa1033f7c4dc240e90f2aac23`
  - Upgrade [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx) to `sha256:2c5226dfba416af189fa7ad18cb6fa307a483a08785c9bdbf172e590c450e5d7`
  - Upgrade [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) to `sha256:e5f6d1a62786affd1abd882ecc73e9353ce78adea1650711f6e351767723712d`

</details>

<details>
<summary>chore(deps): update zricethezav/gitleaks docker tag to v8.18.1</summary>

  - Schedule: ["at any time"]
  - Branch name: `renovate/zricethezav-gitleaks-8.x`
  - Merge into: `master`
  - Upgrade [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) to `sha256:6945c62ca019ead32bc337ab0c9fd055e98d82961765d38b7ccccc84dae95d0f`

</details>

<details>
<summary>chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.0</summary>

  - Schedule: ["at any time"]
  - Branch name: `renovate/pipelinecomponents-hadolint-0.x`
  - Merge into: `master`
  - Upgrade [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) to `sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b`

</details>

<details>
<summary>chore(deps): update thegeeklab/drone-docker-buildx docker tag to v24</summary>

  - Schedule: ["at any time"]
  - Branch name: `renovate/thegeeklab-drone-docker-buildx-24.x`
  - Merge into: `master`
  - Upgrade [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx) to `sha256:0599efcb7d937a42f1664421f2c010252b49c34e56f76b5e4d0cb1cf2095ac89`

</details>

<br />

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for `prhourlylimit` for details.

---

 Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section.
If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

<!--renovate-config-hash:e80b4e42a3043bc12fa0640db4bac392d2bf770acf841360d7c8ceeeac2ec1a9-->

Reviewed-on: #1
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:43:56 +01:00
b272a8c17e ci: set image for hadolint 2024-01-26 23:29:01 +01:00
c6800a3044 ci: set tag for gitleaks 2024-01-26 22:53:05 +01:00
8e6472e491 ci: fix woodpecker warnings 2024-01-24 20:02:51 +01:00
85a886ebbf add badge 2023-11-08 13:22:41 +01:00
e288669cb8 ci: typo 2023-11-07 15:39:15 +01:00
844bbfaf99 ci: fix vars 2023-11-07 15:39:05 +01:00
15f03a20ce drone -> woodpecker 2023-11-07 15:36:33 +01:00
11cad3a3ab ci: remove push to dockerhub 2023-08-22 09:54:49 +02:00
e9b3d8ab14 ci: remove proxy 2023-06-19 12:02:11 +02:00
52e2b9ae5f set bash explicit 2023-06-19 11:13:33 +02:00
f48be9b0af housekeeping 2023-06-19 11:13:27 +02:00
c64a78a15e ci: syntax 2023-06-10 11:10:14 +02:00
d482fddf0c ci: syntax 2023-06-10 11:09:29 +02:00
07baef79ff ci: add parallelism 2023-06-10 11:08:56 +02:00
54009fb408 ci: ignore DL3025 2023-06-10 11:03:35 +02:00
4ce156082a Revert "ci: DL3025"
This reverts commit 7e303af240.
2023-06-10 11:02:50 +02:00
0ee162d8b2 ci: ignore DL3018 2023-06-10 10:58:26 +02:00
cde8a59e3b ci: DL3006 2023-06-10 10:57:33 +02:00
59ab15133f ci: DL3045 2023-06-10 10:56:16 +02:00
6e35747fd3 ci: DL3020 2023-06-10 10:54:58 +02:00
25e7e11b14 ci: DL3059 2023-06-10 10:53:31 +02:00
7e303af240 ci: DL3025 2023-06-10 10:52:41 +02:00
1d99f964f4 ci: DL3019 2023-06-10 10:51:28 +02:00
bbd51013f1 ci: add hadolint 2023-06-10 10:49:55 +02:00
295b8cfdec add new version 2023-06-10 10:01:06 +02:00
60df3d193f readme 2023-06-08 14:51:44 +02:00
e3134bed42 ci: fix platforms 2023-06-08 14:32:13 +02:00
0b75ed64c9 ci: add arch 2023-06-08 14:29:23 +02:00
f645184ce0 ci: add dockerhub 2023-06-08 14:21:40 +02:00
8e5810c8b5 ci: skip hadolint 2023-06-08 14:06:56 +02:00
03e9954691 add ci 2023-06-08 14:03:48 +02:00
Maciej
3f20c32e0c
Merge pull request #1 from xanderificnl/patch-1
Update README.md
2022-09-23 08:18:32 +02:00
Xander
49f09ef5f6
Update README.md
Prefer to use `docker save -o` to set the output file. I'm currently on a Windows machine and with Powershell the command results in a corrupt file (i.e. 16M large, and not an archive).

Besides that, it works like a charm. Cheers!
2022-09-08 14:50:40 +02:00
TheMickeyMike
ce3283d68e Delete .tar file 2022-07-05 08:21:01 +02:00
TheMickeyMike
23cf320631 Push all work to master 2022-07-05 08:20:32 +02:00
Maciej
f7e15ae6b1
Initial commit 2022-07-05 07:57:40 +02:00